[wp-trac] [WordPress Trac] #19337: is_ssl() fails on LiteSpeed server

WordPress Trac wp-trac at lists.automattic.com
Tue Nov 29 00:36:03 UTC 2011


#19337: is_ssl() fails on LiteSpeed server
-----------------------------------------+------------------------------
 Reporter:  niklasbr                     |       Owner:
     Type:  defect (bug)                 |      Status:  new
 Priority:  normal                       |   Milestone:  Awaiting Review
Component:  Security                     |     Version:  3.3
 Severity:  normal                       |  Resolution:
 Keywords:  has-patch reporter-feedback  |
-----------------------------------------+------------------------------

Comment (by dd32):

 The problem here is, What Proxy configurations do you support? There are
 at least 4 different fields you can use for the Remote IP when proxied,
 none of them guaranteed to be reliable, Many different ways to present SSL
 information, etc

 In this case, Remapping/correcting the `$_SERVER` vars to what you
 ''know'' is good for your server configuration after it's been proxied is
 a must, only the server admin really knows what fields their proxy is
 passing that the proxy has been set and can trust the value of.

 You'll want to correct REMOTE_ADDR as well in `wp-config.php` (for spam
 filtering and comment logging)

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19337#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list